Re: Large scale transparent proxying

From: Andy Doran <ad@dont-contact.us>
Date: Fri, 15 Oct 1999 09:24:59 +0100 (BST)

On Fri, 15 Oct 1999, Pete Yandell wrote:

> > On Thu, 14 Oct 1999, Pete Yandell wrote:
> >
> >> I'm running squid-2.2.STABLE4 under NetBSD 1.4.1 doing transparent
> >> proxying without caching, and with about 200 concurrent users (I don't
> >> have a figure for number of hits per second) the load gets really high
> >> (85% CPU usage or thereabouts) on a Pentium II 450 with 256Mb of RAM.
> >> A lot of that load seems to be system CPU time dealing with the
> >> required NAT translation.
> >>
> >> It seems to me that load shouldn't really be high...what it's doing is
> >> really pretty simple, especially given that it's not caching.
> >
> > Just a thought, but what sort of network card are you using?
>
> Intel EtherExpress 10/100 (running at 100).

That card shouldn't eat CPU time at all. I could suggest using LFS
(instead of FFS) as the filesystem type for the cache dir. It's a lot
better performing, but you'd do it at your own risk :). Maybe FFS with -o
async,noatime.

If your ipfilter rules are complex enough that'll contribute to the high
load.

- ad
Received on Fri Oct 15 1999 - 02:34:59 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:48:55 MST